Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/19501449-30d6-3af1-9ef6-26dcc010091c.roa
File:                     19501449-30d6-3af1-9ef6-26dcc010091c.roa (raw, json)
Hash identifier:          BmaG1JvR4sv22XouRUtlX8mzx726TlKT1UIXYx/9wLQ=
Subject key identifier:   AA:4F:B5:60:F4:CB:49:D6:DC:74:BB:F4:4E:34:A6:FE:49:26:1B:7D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B1C36CFA862605D6288359940
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/19501449-30d6-3af1-9ef6-26dcc010091c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     393249
IP address blocks:        206.12.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:cf:a8:62:60:5d:62:88:35:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=49739e9e-c2bd-4c56-bee7-328e99a04ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:97:22:ab:78:5f:f2:77:44:27:d0:5b:5e:
                    9b:21:5c:0e:0f:d8:3b:83:b7:e7:62:2e:13:3d:de:
                    2f:1a:d2:f1:c8:27:f8:c9:97:5e:29:9e:1a:33:d2:
                    80:04:fb:4b:ed:f5:38:33:ff:f6:c8:1d:c7:a5:db:
                    40:7d:d5:c0:13:93:59:d6:3b:31:be:62:d1:a1:fb:
                    e2:d5:4c:49:0a:79:31:4a:71:89:e8:4c:78:14:56:
                    5f:00:f1:14:58:93:29:1a:25:25:5a:e4:21:53:d4:
                    b8:c4:05:d4:3f:b4:39:03:07:47:d2:4b:e0:cc:c4:
                    86:62:1e:5e:e5:43:63:17:3e:df:36:85:a4:78:74:
                    a1:27:33:fc:8a:d9:88:6d:5d:91:b3:ad:a9:d2:3d:
                    3d:62:b8:e4:cd:00:28:03:f9:ec:25:f1:46:0b:0c:
                    94:a2:00:b7:74:51:8e:a3:9f:c9:be:4d:bb:5c:90:
                    af:42:a1:15:c0:84:3e:46:94:4c:f3:34:ae:1e:da:
                    2b:c5:9a:a9:de:1b:87:ef:f6:2e:d0:aa:eb:9e:02:
                    51:58:8f:9b:28:b7:06:86:e2:06:7a:d2:96:50:d1:
                    b5:33:1f:f2:59:8b:7e:5e:a1:c5:b4:55:ed:2d:95:
                    3e:8f:de:00:d7:2e:6e:59:81:81:38:16:6e:26:4a:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:B5:60:F4:CB:49:D6:DC:74:BB:F4:4E:34:A6:FE:49:26:1B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/19501449-30d6-3af1-9ef6-26dcc010091c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:91:72:68:34:a7:c1:20:42:90:74:86:61:32:a1:b5:b9:04:
         fe:15:2b:8e:be:4c:7b:9a:de:6f:1c:0f:1e:81:eb:57:86:2d:
         07:e4:3a:a4:c8:bf:f6:6b:05:e1:8f:bd:88:18:f9:5d:8c:5e:
         1a:2a:25:e1:9d:59:66:87:34:00:f4:8a:03:3f:12:a4:a4:f0:
         a8:06:5a:33:45:ff:74:38:c5:4e:4d:98:6f:46:68:25:c5:80:
         25:e4:47:10:ac:96:9d:90:c6:7b:10:11:9d:32:e0:0b:a4:b4:
         73:6e:17:2d:34:4f:10:e6:2e:10:09:1d:2f:b6:80:d0:ae:35:
         da:12:eb:b1:c4:ee:93:f4:64:db:8a:49:22:04:6a:9e:dc:ce:
         4f:a7:4f:8c:c4:8d:5d:68:bb:18:22:bc:8f:3b:bd:c0:5d:48:
         5a:9e:f1:ce:45:0e:4a:f8:97:1d:fc:1c:a0:d3:3f:ad:4e:df:
         87:18:5f:dc:20:e7:3e:25:85:b8:3a:a2:c3:8d:49:ec:dc:24:
         0c:95:3c:20:d1:5a:26:f5:e2:7a:48:bc:5e:0b:a2:66:25:64:
         22:ac:c3:19:4c:e0:e1:a2:38:9e:b6:a5:4b:e5:79:a9:56:7c:
         e2:c8:db:2c:48:19:54:4c:7b:67:e0:cc:b4:32:2b:b2:94:b1:
         f1:cd:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:01:28 2025 by rpki-client